In embodiments of statistics value chart interface row mode drill down, a first interface is displayed in a table format that includes columns each with field values of an event field, and each column having a column heading of a different one of the event fields, and includes rows each with one or more of the field values, where each field value in a row is associated with a different one of the event fields, and each row includes an aggregated metric that represents a number of events having field-value pairs that match all of the one or more field values listed in a respective row and the corresponding event fields listed in the respective columns. A row can be emphasized in the first interface, and in response, a menu is displayed with selectable options to transition to a second interface that displays a listing of the events based on a selected one of the options.
Legal claims defining the scope of protection, as filed with the USPTO.
2. The method of claim 1, wherein the column headings of the table include the first field name and the second field name based on the first field name and the second field name being specified in the search query.
3. The method of claim 1, wherein the set of fields is a subset of the set of fields included in the set of events.
4. The method of claim 1, wherein the computation is performed based on being specified in the search query.
5. The method of claim 1, wherein the subset of events include the first value and the second value in the row based on the first value and the second value being associated with the row.
6. The method of claim 1, wherein the subset of events do not include the first value and the second value in the row based on the first value and the second value being associated with the row.
7. The method of claim 1, wherein the display of the option is in a menu that includes a designation of a field from the first field and the second field and a corresponding value associated with the row.
8. The method of claim 1, wherein the listing of the subset of events in the second interface includes a portion of raw machine data of an event in the subset of events.
10. The method of claim 1, further comprising causing, in response to third input indicating a third selection of the row, an emphasis indicator of the row in the first interface, wherein the first input is to the emphasis indicator of the row, and wherein the row represents the events from the set of events that have the first value and the second value in the row.
12. The system of claim 11, wherein the computation and the first field and the second field are user specified using the first interface.
13. The system of claim 11, wherein the table only includes column headings for the first field name, the second field name, and the indication of the type of metric.
14. The system of claim 11, wherein the causing of the display of the first interface is in response to a command in the search query that indicates the computation and the first field and the second field.
15. The system of claim 11, wherein the computation is an average.
17. The one or more computer-readable non-volatile storage memory of claim 16, wherein the column headings of the table include the first field name and the second field name based on the first field name and the second field name being specified in the search query.
18. The one or more computer-readable non-volatile storage memory of claim 16, wherein the set of fields is a subset of fields included in the set of events.
19. The one or more computer-readable non-volatile storage memory of claim 16, wherein the computation is performed based on being specified in the search query.
20. The one or more computer-readable non-volatile storage memory of claim 16, wherein the subset of events include the first value and the second value in the row based on the first value and the second value being associated with the row.
Cooperative Patent Classification codes for this invention. Click any code to explore related patents in that topic.
September 23, 2020
March 28, 2023
Browse 5M+ US patents with plain-English claim translations and AI-generated analysis.